Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.KeyloggerX-gen.27939.30838.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.KeyloggerX-gen.27939.30838.exe
Resource
win10v2004-20230703-en
General
-
Target
SecuriteInfo.com.Win32.KeyloggerX-gen.27939.30838.exe
-
Size
642KB
-
MD5
f1bba8f9f70198ad9bbb799fef6d4c1e
-
SHA1
3f8e7b1d4d92a17c79725ee7f01b63ccdab4c7ed
-
SHA256
7fb288f5178629fb28c3e69ddce9ae31d61bccc816ff87f7e9dcfbb401238cb2
-
SHA512
15adb9a3add735846774990c43a865aa0bd050adea241b8338bba3ff653c8d4377943b62ae1aaa82b593cd39be783c77a2b0617194660c57928ff22327884bbc
-
SSDEEP
12288:qUL54aSIqtp+OU2/7K4VzoXAHKTtyjmoSw/t7kUk6/vx72:TL5XzOU2u4x+pyqoSw/hkUk6nx72
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SecuriteInfo.com.Win32.KeyloggerX-gen.27939.30838.exe
Files
-
SecuriteInfo.com.Win32.KeyloggerX-gen.27939.30838.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 635KB - Virtual size: 635KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ